Sonatype, Inc. Privacy Policy

September 21, 2026

Sonatype, Inc., and its subsidiaries (collectively referred to as “Sonatype,” “our,” “us,” and “we”), understand that you care about how we collect, use, and share personal information and we value the trust you place in us. This Privacy Policy applies when you interact with our websites (including when you apply for employment at Sonatype), events, contests and surveys, social media sites and handles, email, as well as where we use your personal data to manage an account we create for you in connection with a contract with our customers, and to otherwise manage our contract with our customers (our “Services”). This Privacy Policy explains:

• the types of information we collect through our Service
• how we use and protect that information
• the types of information we may share with others and under what circumstances
• the choices you have regarding our collection, use, and sharing practices
• details regarding our use of third-party cookies and other tracking technologies

We also include specific disclosures for residents of the state of California and of the United Kingdom, European Economic Area, and Switzerland (including a disclosure regarding your rights, including the right to object to some of the processing which we carry out).

This Policy applies when you interact with us through our Services. It also applies anywhere it is linked. It does not apply to non-Sonatype websites, mobile applications, and events that may link to the Services or be linked to or from the Services, including local events organized and hosted by third-parties. Please directly review the privacy policies for those non-Sonatype websites, applications, and events to understand how their privacy practices may differ.

Information We Collect

Information you give us

Some of the Services may include features or services that permit you to enter contact information and other information about you. We collect and store any information you enter on our Services. This includes:

• Identification and Contact Information: Name, phone number, email address, user ID, demographic information.
• Payment and Transaction Information: Payment information (e.g. credit/debit card details) and records of transactions made on our website.
• Appointment, Booking, and Event Registration Information: Appointment booking and event registration details.
• Communication and Interaction Information: Information, meeting recordings (upon agreement) or data you provide by interacting with our website, social media pages (including posts, comments, messages, and other interactions on our pages), surveys, contests, online forums and chatrooms, or by commenting on content posted on our Services (these comments are also visible to other users of our Services and may also be visible to the public), your testimonial(s), records of communications if you contact us and your preferences for communications.

If you apply for employment with us, we also collect and store any information that you provide in connection with your application. This includes:

• Employment Application Information: Information about your current employer, professional or employment experience and educational background, information about criminal record checks as permitted by local law.
• Sensitive Information: Citizenship or immigration status; gender, race, disability status, veteran status (voluntarily provided during employment application).

Information We Collect Automatically

When you interact with the Services, certain information about your use of our Services is collected automatically. This includes:

• Website Usage and Analytics Information: Details of your visits to our site and information generated in the course of the use of our Services (including the timing, frequency, and pattern of service use) including, but not limited to, traffic data, Internet Protocol (“IP”) address, Internet Service Provider (“ISP”), date and time stamps, clickstream data, weblogs, other communication data, the resources that you access, and how you reached and exited the site and details regarding the device you use to access our Services, including, its operating system, and browser type.
• Engagement Information: Information about how you interact with our ads, newsletters, and marketing communications, including whether you open or click links in any correspondence and information that you make available to us on a social media platform (such as by clicking on a social media icon linked from our Services), including information included in your posts.

Third-Party Cookies and Tracking Technologies

Much of the above information is collected through cookies, web beacons, and other tracking technologies, as well as through your web browser or device. Sonatype relies on partners to provide many features of our sites and Services using data about your use of our and other sites, and how you interact with our emails.

Please visit our Cookie Notice for more information about how we use different categories of cookies and similar technologies and your options for managing their collection of data. We currently do not take steps to respond to browsers’ “Do Not Track” signals as no uniform standard to respond to such signals has been developed at this time.

You can learn more about ad serving companies and the options available to limit their collection and use of your information by visiting the websites for the Network Advertising Initiative, the Digital Advertising Alliance, and the European Interactive Digital Advertising Initiative. Similarly, you can learn about your options to opt out of mobile app tracking by certain advertising networks through your device settings and by resetting the advertiser ID on your Apple or Android device.

Please note that opting out of advertising networks services does not mean that you will not receive advertising while using our Services or on other websites, nor will it prevent the receipt of interest-based advertising from other companies that do not participate in these programs. It will, however, exclude you from interest-based advertising conducted through participating networks, as provided by their policies and choice mechanisms. If you delete your cookies, you may also delete your opt-out preferences.

Sometimes we receive information about you from third parties. In particular, we may receive:

• Website Usage and Analytics Information: from analytics providers;
• Identification, Contact Information, Communication and Interaction Information: from advertising networks, data partners and social media platforms;
• Identification, Contact Information, Communication and Interaction Information, Employment Application and Sensitive information from service providers (recruiters, background-check vendors if applicable) and your references; and
• Information about you from legal, regulatory, or law-enforcement authorities.

How We Use and Protect Your Information

If you are a user in the UK, EEA or Switzerland, see Annex 1, Information for Individuals Located in the UK, EEA, and Switzerland, for additional information including the lawful basis on which we rely to process your personal data for these purposes.

We may use the information we collect from you to:

• Manage provision of our products and services, including to take steps to enter into a contract for sale or for services, create and manage user accounts, process payments, fulfill orders, verify identity, process contest entries and prizes, and send service communications.
• Promote our products and services including by identifying individuals interested in our products and services, sending marketing communications and including customer testimonials on our website
• Enable additional features on our websites and to provide you with a personalized service on our website.
• To serve ads on social media sites and measure the effectiveness of those ads.
• Provide you with the best service and improve and grow our business, including by sending invitations to take part in surveys and market research, understanding our customer base and purchasing trends, and understanding the effectiveness of our marketing.
• Understand how our Services are being used, track site performance, and make improvements.
• Deliver tailored advertising on our Services based on your preferences or interests across services and devices and measuring the effectiveness of ads.
• Enable AI analysis and training for AI models or systems, including generative AI providers, to assess and enhance your communications and interactions with Sonatype and our products.
• Plan, conduct, and administer our business, including responding to comments and complaints about our products and services, maintaining records and accounts, and in connection with legal claims, compliance, regulatory, and investigative purposes as necessary (including disclosure of such information in connection with legal process or litigation).
• Detect, investigate, and prevent activities that may violate our policies or be fraudulent or illegal, and to comply with legal requirements regarding the provision of products and services.
• Process and evaluate your application for employment, including keep you updated on opportunities.

How We Secure the Information We Collect From or About You

The security of your personal information is very important to us. When you enter sensitive information (such as credit card number or your password), we encrypt that information using reasonable security measures during transmission and upon receipt. We always use a combination of physical, technical, and administrative safeguards to protect the information we collect through the Services. While we use these precautions to safeguard your information, we cannot guarantee the security of the networks, systems, servers, devices, and databases we operate or that are operated on our behalf. If you have any questions about security on our Site, you can contact us at security@sonatype.com.

How We Share Your Information

• Service Providers and Contractors: We engage vendors to perform certain functions on our behalf such as: billing and collection providers; auditing and accounting firms; professional services consultants; providers of analytics services; agents and providers of AI services; background check providers; security vendors; employment recruiters, and IT vendors.
• Social Media Platforms: We may share personal information with social media platforms where we show ads to you about our products and services on social media platforms. Social media platforms may use cookies, pixels or other similar technologies to collect information about your use of our website. In some circumstances, we act as a joint controller with these social media platforms where they collect information about you through their tracking technologies implemented on our website.
• Companies involved in advertising: We partner with companies that assist us in advertising about our Services to others who may be interested in the Services. These companies may use tracking technologies on our website to collect or receive information from the Services and elsewhere on the internet and use that information to provide measurement services and target ads.
• Corporate Affiliates: We share customer data with our subsidiary companies.

Cross-border Transfer of Data

If you are a user in the UK, EEA or Switzerland, see Annex 1 - Information for Individuals Located in the UK, EEA, and Switzerland.

If you use our Services outside of the United States, you understand that we may collect, process, and store your information in the U.S. and other countries. The laws in the U.S. regarding information may be different from the laws of your state or country. Any such transfers will comply with safeguards as required by relevant law. By using the Services, you consent to the collection, international transfer, storage, and processing of your data.

Additional Information About Our Data Collection and Sharing Practices

Customer Testimonials

We post customer testimonials on our web site which may contain personal information. If you wish to update or delete your testimonial, you can contact us at privacy@sonatype.com.

Sharing of Aggregated Data

We may share aggregated or de-identified data at our discretion, including with marketing agencies, media agencies, and analytics providers. These other companies will not be able to relate this data to identifiable individuals.

Lawful Requests

We may share data when we believe in good faith that we are lawfully authorized or required to do so to respond to lawful subpoenas, warrants, court orders, or other regulatory or law enforcement requests, including requests made by public authorities to meet national security or law enforcement requirements.

Children Under Age 18

Sonatype does not knowingly collect or solicit personal information from anyone under the age of 18 or knowingly allow such persons to register for an account or event. If you are under 18, please do not attempt to send any information about yourself to us, including your name, address, telephone number, or email address. No one under age 18 may provide any personal information to or on the Service. In the event that we learn that we have collected personal information from a child under age 18, we will delete that information as quickly as possible. If you believe that we might have any information from or about a child under 18, please contact us at privacy@sonatype.com.

Change of Ownership or Corporate Organization

We may transfer to another entity or its affiliates or service providers some or all information about you in connection with, or during negotiations of, any merger, acquisition, sale of assets or any line of business, change in ownership control, or financing transaction. We cannot promise that an acquiring party or the merged entity will have the same privacy practices or treat your information the same as described in this Policy.

Your Options and Rights Regarding Your Information

Please log into your account to update your contact information and payment method, as applicable.

If at any time you would like to unsubscribe from receiving future emails, you can click the unsubscribe link at the bottom of any email newsletter or marketing communication, or separately email us at privacy@sonatype.com and we will promptly remove you from all correspondence. You may still receive service messages depending on the nature of our relationship with you.

Your California Privacy Rights

Persons with disabilities may obtain this notice in alternative format upon request by contacting us at privacy@sonatype.com or calling toll-free: 1-888-890-1530

The California Consumer Privacy Act (“CCPA”) provides California residents with rights to receive certain disclosures regarding the collection, use, and sharing of “Personal Information,” as well as rights to know/access, delete, correct, and limit sale and sharing of Personal Information. You also have the right to be free from discrimination based on your exercise of your CCPA rights. For more information about the CCPA, including how to exercise rights that you may have under the CCPA, please see our California Privacy Notice.

Special Information for Nevada Residents

Residents of the State of Nevada have the right to opt out of the sale of certain pieces of their information to other companies who will sell or license their information to others. At this time, Sonatype does not engage in such sales.

Changes to This Policy

We may make changes to this Policy from time to time. We will post any changes here, and such changes will become effective when they are posted. Your continued use of our Services following the posting of any changes will mean you accept those changes.

For questions or suggestions regarding our privacy practices, please contact us at:

Sonatype, Inc.

Attn: Privacy Office/Legal Department
8161 Maple Lawn Blvd, Suite 250
Fulton, MD 20759
1-888-890-1530
Email: legal@sonatype.com

Annex 1 - Information for Individuals Located in the UK, EEA, and Switzerland

Controller

Sonatype Inc. is the data controller of your personal data. In addition, the Sonatype entity that you apply for a job with will also act as a data controller of your personal data.

How We Use and Protect Your Information

The legal bases that apply to our purposes of processing are set out below:

Personal Data Category	Purpose	Legal Basis
Identification and Contact Information Payment and Transaction Information Appointment, Booking, and Event Registration Information Communication and Interaction Information	Manage the provision of our products and services, including to take steps to enter into a contract for sale or for services, create and manage user accounts, process payments, fulfill orders, verify identity, and send service communications.	Our legitimate interest in managing our business, providing services to our customers, and continuously improving those services.
Identification and Contact Information Payment and Transaction Information Appointment, Booking, and Event Registration Information Communication and Interaction Information Engagement Information	Process contest entries and prizes	Necessary to perform a contract with you or to take steps at your request prior to entering into a contract with you.
Identification and Contact Information Communication and Interaction Information	To promote our products and services including by identifying individuals interested in our products and services, sending marketing communications and including customer testimonials on our web site.	Unless we require consent under applicable local law, in our legitimate interests to promote and grow our business Consent where required by applicable law.
Identification and Contact Information Payment and Transaction Information Communication and Interaction Information Website Usage and Analytics Information Engagement Information	Enable additional features on our websites and to provide you with a personalized service on our website.	Unless we require consent under applicable local law, in our legitimate interest in providing a personalised service. Consent where required by law, for example where we use cookies and similar tracking technologies.
	Provide you with the best service and improve and grow our business, understanding our customer base and purchasing trends, and understanding the effectiveness of our marketing (including through tracking how you interact with our marketing communications).	Unless we require consent under applicable local law, in our legitimate interest in understanding customer preferences and improving our products, services, and communications. Consent where required by law, for example where we use cookies and similar tracking technologies.
Identification and Contact Information Payment and Transaction Information Communication and Interaction Information Website Usage and Analytics Information Engagement Information	To send you invitations to take part in surveys and market research	Unless we require consent under applicable local law, in our legitimate interests in understanding customer preferences and improving our products, services, and communications. Consent where required by law.
Identification and Contact Information Website Usage and Analytics Information	To serve ads on social media sites to you and measure the effectiveness of those ads.	Consent
Identification and Contact Information Communication and Interaction Information Website Usage and Analytics Information Engagement Information	Understand how our Services are being used, track site performance, and make improvements.	Unless we require consent under applicable local law, in our legitimate interest in understanding customer preferences and improving our products, services, and communications. Consent where required by law, for example where we use cookies and similar tracking technologies
Identification and Contact Information Communication and Interaction Information Website Usage and Analytics Information Engagement Information	Deliver tailored advertising on our Services based on your preferences or interests across services and devices and measuring the effectiveness of ads.
All	Plan, conduct, and administer our business, including responding to comments and complaints about our products and services, maintaining records and accounts, and in connection with legal claims, compliance, regulatory, and investigative purposes as necessary (including disclosure of such information in connection with legal process or litigation).	Necessary for compliance with a legal obligation in respect of compliance with EU law, member state law, and UK law. If a legal obligation does not apply, or compliance is required under non-EU/UK law, we rely on our legitimate interest in maintaining the security and integrity of our organisation. In the UK, this is a recognised legitimate interest when we do this to prevent, detect, or investigate a crime.
All	Detect, investigate, and prevent activities that may violate our policies or be fraudulent or illegal regarding the provision of our products and services
All	To comply with the following legal obligations tax laws and similar obligations; health and safety obligations; employment and social security law obligation; and equality and anti-discrimination obligations. Sometimes it is also necessary for us to comply with requirements to respond to court orders, subpoenas or other legal processes.	To comply with a legal obligation.
Applicants only
Identification and Contact Information Communication and Interaction Information Employment Application Information Sensitive Information	Process and evaluate your application for employment.	Necessary for compliance with a legal obligation in respect of compliance with EU law, member state law, and UK law. If a legal obligation does not apply, or compliance is required under non-EU/UK law, we rely on our legitimate interest to identify and evaluate suitable candidates to work at our organisation. We also have an interest in analysing and monitoring the diversity of the workforce.
	Keep you updated of future career opportunities.	Unless we require consent under applicable local law, in our legitimate interest in identifying and evaluating suitable candidates to work at our organisation. Consent where required by law.
	We conduct pre-employment background checks to conduct checks relating to employment history, qualifications and education, criminal history and similar checks as permitted by local law.	Our legitimate interest in verifying candidate information, assessing suitability for employment, and ensuring the safety and integrity of our workforce and operations. In some cases, background checks may also be processed to comply with a legal obligation, where applicable to the role or jurisdiction.

There are instances where we have a legitimate interest to use your data. Our legitimate interest will vary depending on what we are using your data for, and we explain above what the interest is and how it relates to the processing operations that we are carrying out. Where we process personal data on the basis of a legitimate interest, then – as required by data protection law – we have carried out a balancing test to document our interests, to consider what the impact of the processing will be on individuals and to determine whether individuals’ interests outweigh our interests in the processing taking place. In the UK, we do not need to conduct a balancing test if we process personal data for a “recognised legitimate interest.” You can obtain more information about this balancing test by contacting privacy@sonatype.com.

Retention

Where we process your personal data to create and maintain your user account, we do this for as long as you are an active user and for 6 years after this, unless required in connection with litigation.

Where we process personal data in connection with performing a contract or for a competition, we keep the data for 6 years from your last interaction with us, unless required in connection with litigation.

Where we process personal data for marketing purposes or with your consent, we process the data until you ask us to stop and for a short period of up to 60 days after this (to allow us to implement your requests). We also keep a record of the fact that you have asked us not to send you direct marketing or to process your data so that we can respect your request in future.

Where we process personal data for site security purposes, we retain it for 18 months.

Where you apply to work with us and you are successful, we will retain your personal data only for as long as we need it for our legitimate interest in accordance with applicable law, for the purposes of the recruitment process and, once this process is finished, for an appropriate period so as to be able to deal with any legal claims linked to the application process. Recruitment records for successful applicants are generally kept for 6 years. If you become an employee, relevant personal information you provide will become a part of your employee file and may be used later for the management of the employment relationship.

Where you apply to work with us and you are not successful, we will retain your personal data with your permission for 1 year so we can keep you in mind for future recruitment processes; otherwise, it will be deleted after 6 months.

If you want to learn more about our specific retention periods for your Personal Data, you may contact us at privacy@sonatype.com. Upon expiry of the applicable retention period, we securely destroy your Personal Data or hold it in a form that no longer identifies you in accordance with applicable laws and regulations.

Rights

Right	Summary
The right of access	Enables you to receive a copy of your personal data
The right to rectification	Enables you to correct any inaccurate or incomplete personal data we hold about you
The right to erasure	Enables you to ask us to delete your personal data in certain circumstances
The right to restrict processing	Enables you to ask us to halt the processing of your personal data in certain circumstances
The right to object	Enables you to object to us processing your personal data in some circumstances (in particular, where we don’t have to process the data to meet a contractual or other legal requirement). Where we have asked for your consent, you may withdraw consent at any time. If you ask to withdraw your consent to Sonatype processing your data, this will not affect any processing which has already taken place at that time.
The right to data portability	Enables you to request us to transmit personal data that you have provided to us, to a third party without hindrance, or to give you a copy of it so that you can transmit it to a third party, where technically feasible

To submit a request to exercise your rights, please use the request form located here or contact us at privacy@sonatype.com. In order to verify your identity, we may require you to provide us with information prior to accessing any records containing information about you.

Your rights may be limited, for example if fulfilling your request would reveal personal data about another person, or if you ask us to delete information which we are required by law or have compelling legitimate interests to keep. If you have unresolved concerns, you have the right to make a complaint to us and to a data protection authority. In the UK, this will be the Information Commissioner. A list of authorities in the EEA can be found here.

Where we collect personal data to comply with our legal obligations, this is mandatory. In all other cases, provision of the requested personal data is optional, but this may affect your ability to participate in certain programs or systems, where the information is needed for those purposes.

Individuals located in the UK, EEA, and Switzerland have an absolute right to opt-out of direct marketing or profiling that we carry out for direct marketing purposes. You can do this by following the instructions included in the applicable message, by setting preferences as may be otherwise indicated on the site or event page, by using the request form here or by contacting us at privacy@sonatype.com. If you have consented to receive direct marketing from third parties (such as affiliated Sonatype companies, business partners or independent resellers), please follow those third parties' opt-out processes.

Please note that we will send you service-related email announcements when it is necessary to do so. For instance, if our Service is temporarily suspended for maintenance, we might send you an email. You do not have an option to opt out of these emails, which are not promotional in nature.

Cross-border Transfer of Data: Additional Information

Personal data that we collect from you may be transferred to and stored at a destination outside the EEA, Switzerland, or the UK. For transfers of personal data outside the EEA, Switzerland, or the UK within the Sonatype group of companies, we rely on approved standard contractual clauses (module 1 or 2 depending on nature of relationship), or, where applicable, the US Data Privacy Framework.

Where we transfer personal data to third parties in locations which do not provide an adequate level of data protection, we ensure appropriate safeguards are in place to protect the transfer of your personal data to these countries. We transfer personal data to business partners and service providers in the US who participate in the US Data Privacy Framework (further details available below); business partners and service providers who rely on approved standard contractual clauses (module 1 or 2 depending on nature of relationship); and business partners and service providers who rely on processor BCRs. This includes business partners and service providers who are in the US, and Canada.

EU-U.S. Data Privacy Framework with UK Extension, and Swiss-U.S. Data Privacy Framework

Sonatype, Inc. complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF (UK Extension), and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce. Sonatype, Inc. has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of Personal Data received from the European Union in reliance on the EU-U.S. DPF and from the United Kingdom (and Gibraltar) in reliance on the UK Extension to the EU-U.S. DPF. Sonatype, Inc. has certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regard to the processing of Personal Data received from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between the terms in this privacy policy and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern. To learn more about the DPF program, and to view our certification, please visit https://www.dataprivacyframework.gov/.

EU, UK, and Swiss individuals have rights to access their Personal Data held by Sonatype, Inc. and to correct, amend, or delete that information where it is inaccurate, or has been processing in violation of the Principles, except where the burden or expense of providing access would be disproportionate to the risks of the individual’s privacy in the case in question, or where the rights of persons other than the individual would be violated. EU, UK, and Swiss individuals may also opt-out of Sonatype, Inc.’s disclosure of their Personal Data to a third party (excluding a third party contracted as an agent to perform tasks(s) on our behalf and under our instruction), or use of their Personal Data for a purpose that is materially different from the purpose(s) for which it was originally collected or subsequently authorized by the individual. In the unlikely event that Sonatype, Inc. obtains Personal Data of EU, UK, and Swiss individuals that is “sensitive information” (i.e., specifying medical or health conditions, racial or ethnic origins, political opinions, religious or philosophical beliefs, trade union membership, or information specifying sex life), we will obtain affirmative express consent from the individual before disclosing such information to a third party or using it for a purpose other than those for which it was originally collected or subsequently authorized by the individual. In addition, Sonatype, Inc. will treat as sensitive any Personal Data received from a third party where the third party identifies and treats it as sensitive. To submit a request to exercise these rights or to opt-out of disclosure of Personal Data, please use the request form located here or contact us at privacy@sonatype.com. Additional information about rights and choices regarding Personal Data of EU, UK, and Swiss individuals is provided above at the beginning of the section "Information for Individuals Located in the UK, EEA, and Switzerland."

In the context of onward transfers, Sonatype, Inc. shall remain liable for the processing of Personal Data it receives under the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and Swiss-U.S. DPF and subsequently transfers to a third party acting as an agent on its behalf if the agent processes such Personal Data in a manner inconsistent with the EU-U.S. DPF Principles, and the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF Principles, unless Sonatype proves that it is not responsible for the event giving rise to damage.

The Federal Trade Commission has jurisdiction over Sonatype, Inc.’s compliance with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF. In certain situations, Sonatype, Inc. may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements. 

In compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF, Sonatype, Inc. commits to resolve DPF Principles-related complaints about our collection and use of your Personal Data. EU, UK, and Swiss individuals with inquiries or complaints regarding our handling of Personal Data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF should first contact Sonatype’s General Counsel by using the request form located here or contacting privacy@sonatype.com.

In compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF, Sonatype commits to refer unresolved complaints concerning our handling of Personal Data received in reliance on the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF to TRUSTe, an alternative dispute resolution provider based in the United States. If you do not receive timely acknowledgment of your DPF Principles-related complaint from us, or if we have not addressed your DPF Principles-related complaint to your satisfaction, please visit https://feedback-form.truste.com/watchdog/request for more information or to file a complaint. The TRUSTe services are provided at no cost to you.

For complaints regarding EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and Swiss-U.S. DPF compliance not resolved by any of the other DPF mechanisms, you have the possibility, under certain conditions, to invoke binding arbitration. Further information can be found in Annex 1 of the DPF Principles.